New SSID doesn't assign DHCP addresses to devices, Cisco Aironet 3600 AP

[odeynitus]

I haven't had to configure an AP to broadcast a SSID before.  But I was asked to configure an SSID on one of our location's AP.  I have the SSID broadcasting, but when I connect devices to it, all the devices don't get an IP that is in our DHCP scope.  I tried recreating the SSID and creating new ones from online guides, but I haven't had any luck in this so far. To me it looks like the SSID doesn't know where to find our DHCP server, but I don't really know where to provide that information to the SSID. The already existing SSID does work and dynamically assigns IPs in our DHCP scope.  Any help is greatly appreciated.

This AP isn't associated to a controller, so all configurations are done locally of the AP.

Edit:  The router is a 2911 and the switch is a 2960x.

[Rasika Nayanajith]

Do you have multiple vlans defined on your AP ? 

Make sure you assign correct vlan to new SSID & that vlan traffic is passing through AP to SW trunk link.

If you could share you configs(without any password details) to have a look

HTH

Rasika

[odeynitus]

Yes I should have them defined.  I attached both the AP and Switch config.  I checked and the SSID (Vendor1) that is vlan 21 is the SSID I am troubleshooting.  The SSID (Secure) that sits on vlan 11 is the working SSID.  

In regards to do you think it is because in the gi0/0 on the AP, there is no trunking defined?

[Rasika Nayanajith]

Under radio 0 interface configure "mbssid" & test it.

As a side note, why not using Radio1 in 5GHz, if you want better performance, configure that interface as well

HTH

Rasika

*** Pls rate all useful responses ***

[odeynitus]

This ap wasn't really managed at all.  It was recently that I was asked to start managing it.  I will be sure to utilize the radio1 interface for the better performance.  I added "mbssid" to the radio0 interface and I am not getting an IP address still.

interface Dot11Radio0
no ip address
!
encryption mode ciphers aes-ccm tkip
!
encryption vlan 11 mode ciphers aes-ccm
!
encryption vlan 21 mode ciphers aes-ccm
!
encryption vlan 50 mode ciphers aes-ccm
!
encryption vlan 31 mode ciphers aes-ccm
!
ssid vendor2
!
ssid vendor1
!
ssid sacfcu
!
antenna gain 0
stbc
mbssid
speed basic-1.0 basic-2.0 basic-5.5 basic-11.0 6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0 m0. m1. m2. m3. m4. m5. m6. m7. m8. m9. m10. m11. m12. m13. m14. m15. m16. m17. m18. m19. m20. m21. m22. m23.
station-role root
end

dot11 ssid vendor1
vlan 21
authentication open
authentication key-management wpa version 2
guest-mode
mbssid guest-mode dtim-period 75
wpa-psk ascii 7 052A0F1D0543411B4E56
!

[Rasika Nayanajith]

Which switchport is connected to this AP ? looks like vlan 21 traffic is not carried across to AP with vlan tagging.

Remove "guest-mode" under SSID configuration as well.

Also set DTIM to default value, do not increase it like 75

mbssid guest-mode dtim-period 2

HTH

Rasika

[odeynitus]

The AP connects to int gi2/0/4.  I did as you said and modified vendor1 ssid.

dot11 ssid vendor1
vlan 21
authentication open
authentication key-management wpa version 2
mbssid guest-mode dtim-period 2
wpa-psk ascii 7 052A0F1D0543411B4E56
end

[patoberli]

Your AP is configured for trunk mode (which it must to offer several VLANs), but your Switchport isn't:
interface GigabitEthernet2/0/4
description WIRELESS ACCESS POINT
switchport access vlan 21
switchport mode access
switchport nonegotiate
power inline auto max 15400
srr-queue bandwidth share 1 30 35 5
priority-queue out
auto qos voip cisco-softphone
spanning-tree portfast
service-policy input AUTOQOS-SRND4-SOFTPHONE-POLICY

[Rasika Nayanajith · Accepted solution]

Hi 

Your G2/0/4 port should configured as trunk port with native vlan 11.

Pls modify its config something like below

interface GigabitEthernet2/0/4
no switchport access vlan 21
no switchport mode access
switchport mode trunk
switchport trunk encap dot1q
switchport trunk native vlan 11

HTH

Rasika

*** Pls rate all useful responses ***

[odeynitus]

Awesome! It is working now!  I changed the switch port to trunk as you suggested and also suggested by patoberli.

Thank you folks!

[Rasika Nayanajith]

Good to hear that...

Thanks for rating our responses as well.  Have a nice day

Rasika